Secure data parser method and system
A secure data parser is provided that may be integrated into any suitable system for securely storing and communicating data. The secure data parser parses data and then splits the data into multiple portions that are stored or communicated distinctly. Encryption of the original data, the portions of data, or both may be employed for additional security. The secure data parser may be used to protect data in motion by splitting original data into portions of data, that may be communicated using multiple communications paths.
1. A method for securing a data set, the method comprising:
splitting the data set into a plurality of data portions, wherein each of the plurality of data portions includes less than all of the data set, and wherein the data set can be reassembled using two or more of the plurality of data portions;
encrypting each of the plurality of data portions with one of a plurality of different encryption keys to generate a plurality of encrypted data portions;
encrypting each of the plurality of different encryption keys to generate a plurality of encrypted different encryption keys;
distributing each of the plurality of encrypted data portions with one of the plurality of encrypted different encryption keys for storage across a plurality of storage devices.
2. The method of claim 1 , further comprising:
receiving a request to retrieve the data set;
receiving data portions from two or more of the plurality of storage devices; and
reassembling the data set using the data portions received from the two or more of the plurality of storage devices.
3. The method of claim 2 , wherein reassembling the data set includes:
decrypting the data portions received from the two or more of the plurality of storage devices; and
reconstructing the data set using the decrypted data portions.
4. The method of claim 3 , further comprising:
receiving the plurality of encrypted different encryption keys from the two or more of the plurality of storage devices;
decrypting the plurality of encrypted different encryption keys received from the two or more of the plurality of storage devices to provide a plurality of decrypted different encryption keys;
wherein decrypting the data portions received from the two or more of the plurality of storage devices is performed using the plurality of decrypted different encryption keys.
5. The method of claim 1 , further comprising:
receiving a request to retrieve the data set;
receiving data portions from two or more of the plurality of storage devices prior to receiving other data portions from other one or more of the plurality of storage devices; and
reassembling the data set using the data portions received from the two or more of the plurality of storage devices, without receiving or using the other data portions.
6. The method of claim 1 , further comprising:
separately storing each of the plurality of encrypted data portions with one of the plurality of encrypted different encryption keys in the plurality of storage devices.
7. The method of claim 1 , wherein the data set includes encrypted data.
8. The method of claim 1 , wherein distributing each of the plurality of encrypted data portions with one of the plurality of encrypted different encryption keys for storage across a plurality of storage devices includes distributing a first one of the plurality of encrypted data portions with a first one of the plurality of encrypted different encryption keys for storage across a first one of the plurality of storage devices;
wherein the first one of the plurality of encrypted different encryption keys was not used to encrypt the first one of the plurality of encrypted data portions, and wherein the first one of the plurality of encrypted different encryption keys was used to encrypt a second one of the plurality of encrypted data portions.
9. The method of claim 1 , wherein splitting the data set into the plurality of data portions uses a random technique or pseudorandom technique.
10. A computer system for securing a data set, the computer system comprising:
at least one hardware processor configured to:
split the data set into a plurality of data portions, wherein each of the plurality of data portions includes less than all of the data set, and wherein the data set can be reassembled using two or more of the plurality of data portions;
encrypt each of the plurality of data portions with one of a plurality of different encryption keys to generate a plurality of encrypted data portions;
encrypt each of the plurality of different encryption keys to generate a plurality of encrypted different encryption keys;
distribute each of the plurality of encrypted data portions with one of the plurality of encrypted different encryption keys for storage across a plurality of storage devices.
11. The computer system of claim 10 , wherein distributing each of the plurality of encrypted data portions with one of the plurality of encrypted different encryption keys for storage across a plurality of storage devices includes distributing a first one of the plurality of encrypted data portions with a first one of the plurality of encrypted different encryption keys for storage across a first one of the plurality of storage devices;
wherein the first one of the plurality of encrypted different encryption keys was not used to encrypt the first one of the plurality of encrypted data portions, and wherein the first one of the plurality of encrypted different encryption keys was used to encrypt a second one of the plurality of encrypted data portions.
12. The computer system of claim 10 , wherein the at least one hardware processor is further configured to:
receive a request to retrieve the data set;
receive data portions from two or more of the plurality of storage devices; and
reassemble the data set using the data portions received from the two or more of the plurality of storage devices.
13. The computer system of claim 12 , wherein reassembling the data set includes:
decrypting the data portions received from the two or more of the plurality of storage devices; and
reconstructing the data set using the decrypted data portions.
14. The computer system of claim 13 , wherein the at least one hardware processor is further configured to:
receive the plurality of encrypted different encryption keys from the two or more of the plurality of storage devices;
decrypt the plurality of encrypted different encryption keys received from the two or more of the plurality of storage devices to provide a plurality of decrypted different encryption keys;
wherein decrypting the data portions received from the two or more of the plurality of storage devices is performed using the plurality of decrypted different encryption keys.
15. The computer system of claim 10 , wherein the at least one hardware processor is further configured to:
receive a request to retrieve the data set;
receive data portions from two or more of the plurality of storage devices prior to receiving other data portions from other one or more of the plurality of storage devices; and
reassemble the data set using the data portions received from the two or more of the plurality of storage devices, without receiving, or using the other data portions.
16. The computer system of claim 10 , wherein the at least one hardware processor is farther configured to:
separately store each of the plurality of encrypted data portions with one of the plurality of encrypted different encryption keys in the plurality of storage devices.
17. The computer system of claim 10 , wherein the data set includes encrypted data.
18. The computer system of claim 10 , wherein splitting the data set into the plurality of data portions uses a random technique or pseudorandom technique.